3 ms·
Yes because otherwise one user could configure a fake printer and see what others are printing. Although for one-user system this doesn't make much sense.
by codedokode 7y ago
Yes because otherwise one user could configure a fake printer and see what others are printing. Although for one-user system this doesn't make much sense.
- sitkack 7y agoMaybe there should be a trust chain for everything.
- simias 7y agoRight, that's the problem IMO, the usual way processes are segregated on Linux harks back to the day of UNIX mainframes shared across dozens of users. It still makes some sense on servers where you want to isolate, say, the database from the web server from postfix from sshd but it's almost entirely inadequate for single-user desktop computers. On my desktop root doesn't really matter, if my user gets compromised it's already game over. I have a lot more to lose if by browser gets backdoored that if my /etc/shadow gets leaked.
- codedokode 7y agoYes, but if we will run every application under different user (which is a sane idea, Android does it and I use it for several apps) then we come back to the problem of not allowing program X to reconfigure a printer. So I think that we still need a confirmation dialog, but without a password.